$ rpki-client -vvf rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft File: bqB70D6DR6gFulr0iLMrL5oULvk.mft (raw, json) Hash identifier: q8I2RKiUDyFOo7lkyQA+Fa0ySDXnc9PObl0dMY17QKo= Subject key identifier: 04:30:77:EF:62:BA:35:F8:64:11:B2:63:67:45:8D:B7:24:BE:A0:CA Authority key identifier: 6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9 Certificate issuer: /CN=A9150080/serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9 Certificate serial: 0422 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft Manifest number: 041C Signing time: Fri 22 Nov 2024 23:57:20 +0000 Manifest this update: Fri 22 Nov 2024 23:57:20 +0000 Manifest next update: Fri 29 Nov 2024 23:57:20 +0000 Files and hashes: 1: bqB70D6DR6gFulr0iLMrL5oULvk.crl (hash: /1/mv3EtdI7rhtDhiH9eoIrXoQtE6etP0NzsfRy04mA=) 2: A29B8E5A46A911EC8F95FC6EC4F9AE02.roa (hash: j0OYbP016uqCUyPAzhyPYu4cMFhnnpV0imO0FVFr9xQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1058 (0x422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150080/serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9 Validity Not Before: Nov 22 23:57:20 2024 GMT Not After : Nov 29 23:57:20 2024 GMT Subject: CN=67411a60-8ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3d:01:82:98:3c:e9:10:89:8a:62:47:d0:d3: df:eb:5a:68:6d:9c:ff:6d:48:23:12:f4:ba:72:b9: 3f:ab:6b:ad:6c:49:18:af:e0:5f:af:15:1e:68:41: 63:b5:ef:e3:41:12:fe:d9:e6:de:66:d9:35:08:4c: 5c:f9:90:ab:14:f9:e5:02:d3:f4:75:bc:b2:9a:46: 5a:21:3c:d1:bb:7f:52:f2:e1:b1:3b:95:13:6c:96: 3b:90:da:9e:8d:20:48:ec:34:0b:f6:3f:7b:9a:76: 7b:30:bf:2b:f1:90:a2:03:49:d1:27:10:21:33:d3: 57:ce:c7:fb:e5:5d:6d:d8:77:7a:bc:ec:15:ce:33: d1:5e:d1:cc:c6:d8:4d:2d:80:50:80:e0:14:a8:80: 5b:9b:16:e2:90:d5:a5:67:98:47:b9:bb:11:81:c2: 33:42:26:17:c3:5b:da:4d:23:7b:2a:c2:2d:a8:0f: f9:86:c1:f1:a1:70:35:8a:db:94:2f:d6:cd:80:72: 47:f8:14:23:11:09:be:9f:f1:75:d2:1c:6a:38:32: 57:da:85:26:43:a0:61:d5:c1:f1:d5:47:39:66:29: 02:e0:d3:bb:aa:22:11:e2:92:75:ed:d1:1c:46:14: aa:ba:c7:a4:64:22:3c:91:9f:ce:aa:d6:66:69:1d: b9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:30:77:EF:62:BA:35:F8:64:11:B2:63:67:45:8D:B7:24:BE:A0:CA X509v3 Authority Key Identifier: keyid:6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:c0:d8:9f:00:1a:30:44:75:15:5e:62:41:59:0c:75:51:a9: ed:b5:aa:c5:ee:f3:fa:ae:6f:15:5c:ca:fa:51:c1:fa:4c:ee: c1:0b:69:f2:dc:b0:8e:05:ce:78:9f:24:d1:dc:ce:f3:95:78: 89:f4:78:a2:f4:d5:d6:ad:51:03:3a:33:f2:2f:bd:cf:b0:4a: 42:a6:4a:4a:d8:0d:f7:0d:f8:c5:0e:1c:56:2d:a8:a5:3e:1a: aa:bf:83:f0:c8:f1:f8:87:42:25:85:02:5c:ae:b8:d5:31:7d: d7:27:de:2a:99:f6:55:3b:d6:bb:41:18:52:d3:4d:b1:94:cb: 05:d4:76:4c:ff:00:8b:33:3f:bb:75:b2:3d:f9:67:05:86:d6: 76:ad:4b:41:a2:67:60:7d:ac:12:cc:e9:66:09:ef:8d:41:5b: ee:b9:35:ce:bb:85:3a:31:a3:85:03:25:e5:83:ea:61:2a:f4: de:67:bc:68:10:9d:45:bf:b2:49:c1:53:87:88:ae:b4:7d:be: fd:aa:67:60:5f:f0:b2:7e:0b:1c:8f:db:1f:9b:28:22:fb:87: 49:0f:c8:fe:48:f6:d0:2b:ba:3f:13:81:81:18:42:1d:98:aa: b4:f0:ce:19:0e:7f:ab:6a:0e:a7:87:94:02:ff:37:97:7f:f2: 10:96:50:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAwODAxMTAvBgNVBAUTKDZFQTA3QkQwM0U4MzQ3QTgwNUJBNUFGNDg4QjMyQjJG OUExNDJFRjkwHhcNMjQxMTIyMjM1NzIwWhcNMjQxMTI5MjM1NzIwWjAYMRYwFAYD VQQDEw02NzQxMWE2MC04YmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwT0Bgpg86RCJimJH0NPf61pobZz/bUgjEvS6crk/q2utbEkYr+BfrxUeaEFj te/jQRL+2ebeZtk1CExc+ZCrFPnlAtP0dbyymkZaITzRu39S8uGxO5UTbJY7kNqe jSBI7DQL9j97mnZ7ML8r8ZCiA0nRJxAhM9NXzsf75V1t2Hd6vOwVzjPRXtHMxthN LYBQgOAUqIBbmxbikNWlZ5hHubsRgcIzQiYXw1vaTSN7KsItqA/5hsHxoXA1ituU L9bNgHJH+BQjEQm+n/F10hxqODJX2oUmQ6Bh1cHx1Uc5ZikC4NO7qiIR4pJ17dEc RhSqusekZCI8kZ/OqtZmaR252wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQwd+9i ujX4ZBGyY2dFjbckvqDKMB8GA1UdIwQYMBaAFG6ge9A+g0eoBbpa9IizKy+aFC75 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDA4MC8yMjNFM0E1MDQ2 OUExMUVDQkU4MTM2MEZDNEY5QUUwMi9icUI3MEQ2RFI2Z0Z1bHIwaUxNckw1b1VM dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JxQjcwRDZEUjZnRnVscjBpTE1yTDVvVUx2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDA4MC8yMjNFM0E1MDQ2OUExMUVDQkU4MTM2MEZDNEY5QUUwMi9icUI3MEQ2RFI2 Z0Z1bHIwaUxNckw1b1VMdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqwNifABowRHUVXmJBWQx1UanttarF7vP6rm8VXMr6UcH6TO7BC2ny 3LCOBc54nyTR3M7zlXiJ9Hii9NXWrVEDOjPyL73PsEpCpkpK2A33DfjFDhxWLail Phqqv4PwyPH4h0IlhQJcrrjVMX3XJ94qmfZVO9a7QRhS002xlMsF1HZM/wCLMz+7 dbI9+WcFhtZ2rUtBomdgfawSzOlmCe+NQVvuuTXOu4U6MaOFAyXlg+phKvTeZ7xo EJ1Fv7JJwVOHiK60fb79qmdgX/Cyfgscj9sfmygi+4dJD8j+SPbQK7o/E4GBGEId mKq08M4ZDn+rag6nh5QC/zeXf/IQllAE -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:34 2024 by rpki-client on console-fra.rpki-client.org